Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/gr-TQBwv5nF9quFIvFMO1sIwDe8.roa
File:                     gr-TQBwv5nF9quFIvFMO1sIwDe8.roa (raw, json)
Hash identifier:          kK9j4XtWlsZ7Ayv92KYM+CeFhfMWwspz5zktRWp0XaA=
Subject key identifier:   82:BF:93:40:1C:2F:E6:71:7D:AA:E1:48:BC:53:0E:D6:C2:30:0D:EF
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       95
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/gr-TQBwv5nF9quFIvFMO1sIwDe8.roa
Signing time:             Sat 01 Mar 2025 01:31:58 +0000
ROA not before:           Sat 01 Mar 2025 01:31:58 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     4685
IP address blocks:        116.91.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar  1 01:31:58 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=82BF93401C2FE6717DAAE148BC530ED6C2300DEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:68:79:49:f5:0c:55:39:72:d2:5c:52:7e:
                    45:7b:37:ee:fc:7d:01:49:01:e9:77:fc:27:08:a3:
                    80:f0:61:60:a7:5e:93:68:da:f3:7a:bf:e0:f9:34:
                    cb:71:b2:ff:02:b4:0f:81:36:c1:ea:5e:3e:03:4b:
                    9d:19:6d:ba:36:77:dc:9f:ec:77:9d:33:53:7d:01:
                    cf:e4:7d:39:e2:c6:98:b6:e6:24:b4:f4:88:c7:7b:
                    34:b1:06:9c:3c:86:a2:f2:88:87:a2:52:e9:0e:28:
                    bd:e1:19:d9:9a:c4:ea:c8:f5:6e:82:0b:c4:24:1d:
                    65:5f:2e:3f:90:6b:99:c6:be:61:09:a8:17:6d:d5:
                    08:02:79:86:ca:32:6a:52:54:40:36:c6:33:20:b2:
                    5c:97:a2:e7:37:fe:42:aa:b8:66:38:4a:df:1f:63:
                    f0:b6:54:70:75:aa:eb:5b:b2:72:d9:d7:3d:8b:a3:
                    21:7a:c5:7b:c8:55:cf:c6:ed:5c:34:ec:85:0a:24:
                    f6:aa:4c:3d:a5:5a:45:78:99:44:7b:76:04:96:35:
                    6e:b7:56:69:60:e7:79:83:96:a9:2a:92:e0:19:20:
                    ee:66:99:29:d5:f3:74:11:ab:d7:b0:a0:6f:a5:a0:
                    4a:f6:46:27:3c:24:9d:6e:0f:f2:95:38:b1:e7:5e:
                    ac:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BF:93:40:1C:2F:E6:71:7D:AA:E1:48:BC:53:0E:D6:C2:30:0D:EF
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/gr-TQBwv5nF9quFIvFMO1sIwDe8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.91.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         51:aa:d6:55:91:8d:01:8f:24:ba:0e:2f:45:96:76:85:91:62:
         17:f9:e7:9c:f5:90:aa:ea:f2:44:0d:ec:3a:df:59:c7:37:f0:
         c8:25:c8:67:0f:cf:07:de:20:55:ad:0d:68:ec:c3:91:97:ab:
         b6:a0:b6:36:b0:88:20:5b:5d:ff:90:07:fb:f4:ac:0e:04:84:
         0d:78:e1:9c:5b:2a:49:d0:f5:d4:e0:b0:4b:bb:ef:2f:cc:a2:
         f4:31:ec:26:c0:fc:74:b2:00:16:bd:2f:65:a3:e9:c3:e3:f2:
         a4:16:b7:4b:34:cb:bd:86:bb:4c:81:61:22:05:e0:57:5d:1a:
         43:59:47:b3:d2:79:8e:4d:bb:3e:6a:be:e7:20:3b:04:22:e7:
         81:b0:8e:5c:60:0c:f5:09:19:44:9d:c0:2d:8f:ce:0b:28:96:
         44:08:d7:49:4d:0d:6c:af:18:c2:27:98:a3:51:f0:3f:61:d3:
         b1:f1:c3:f9:b7:57:5a:87:ac:46:c4:31:9c:88:03:80:4e:68:
         03:aa:66:33:5a:06:5f:6f:96:ce:7d:3c:ed:55:a8:51:c6:04:
         e5:d7:fe:72:cb:fe:3f:69:0d:6c:89:a5:2d:aa:f1:45:e2:24:
         fe:d4:7e:1f:ab:67:61:8b:84:65:e9:61:38:30:6c:89:28:9f:
         2f:16:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:19 2025 by rpki-client